The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-30190: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Nov 27, 2025
CVE-2025-30186: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Nov 27, 2025
CVE-2025-13381: Missing Authorization5.3 MediumN/A0%Nov 27, 2025
CVE-2025-13378: Server-Side Request Forgery (SSRF)6.5 MediumN/A0%Nov 27, 2025
CVE-2025-12584: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Nov 27, 2025
CVE-2025-13536: Unrestricted Upload of File with Dangerous Type8.8 HighN/A0%Nov 27, 2025
CVE-2025-13441: Missing Authorization5.3 MediumN/A0%Nov 27, 2025
CVE-2025-13157: Authorization Bypass Through User-Controlled Key5.3 MediumN/A0%Nov 27, 2025
CVE-2025-13525: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 27, 2025
CVE-2025-13143: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Nov 27, 2025
CVE-2025-12185: Improper Neutralization of Input During Web Page Generation4.4 MediumN/A0%Nov 27, 2025
CVE-2025-12123: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 27, 2025
CVE-2025-7820: Client-Side Enforcement of Server-Side Security7.5 HighN/A0%Nov 27, 2025
CVE-2025-3784: Cleartext Storage of Sensitive Information5.5 MediumN/A0%Nov 27, 2025
CVE-2025-13680: Improper Privilege Management8.8 HighN/A0%Nov 27, 2025
CVE-2025-13675: Improper Privilege Management9.8 CriticalN/A0%Nov 27, 2025
CVE-2025-13540: Improper Privilege Management9.8 CriticalN/A0%Nov 27, 2025
CVE-2025-13539: Authentication Bypass Using an Alternate Path or Channel9.8 CriticalN/A1%Nov 27, 2025
CVE-2025-13538: Improper Privilege Management9.8 CriticalN/A0%Nov 27, 2025
CVE-2025-12151: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Nov 27, 2025
CVE-2025-12758: Incomplete Filtering of One or More Instances of Special Elements7.5 High7.7 High0%Nov 27, 2025
CVE-2025-66314: Improper Privilege Management7.5 HighN/A0%Nov 27, 2025
CVE-2025-34351: Undefined Security WeaknessN/AN/A0%Nov 27, 2025
CVE-2025-13762: Improper Input ValidationN/A4.8 Medium0%Nov 27, 2025
CVE-2025-12713: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Nov 27, 2025
81626-81650 of 742608
‹›